Objective

Final-year cybersecurity undergraduate with hands-on experience in web application penetration testing, vulnerability assessment, and technical reporting across three cybersecurity internships and platforms including PortSwigger Academy and TryHackMe. Strong grounding in OWASP methodologies, Linux, and enumeration, with a detail-oriented, curiosity-driven approach to identifying and exploiting real-world vulnerabilities.

Skills
Offensive & Assessment Skills
  • •Web Application Penetration Testing
  • •Vulnerability enumeration
  • •Nmap, Gobuster, Burp Suite, ZAP
Security Operations & Analysis
  • •Splunk log analysis
  • •Wireshark traffic analysis
  • •Incident triage basics
Networking & Systems
  • •TCP/IP, subnetting
  • •Linux (Bash)
  • •Cisco Packet Tracer
Certificates

eJPT (eLearnSecurity Junior Penetration Tester) — Preparation In Progress (Expected: Dec 2026)

Professional Experience

Vulnerability Assessment & Research Intern

National Cyber Emergency Response Team (NCERT), Pakistan
Jul 2026 – Aug 2026 | Remote
  • •Performed reconnaissance, scanning, and vulnerability analysis on Linux and Windows systems in controlled environments.
  • •Conducted exploitation and privilege escalation exercises and assessed security weaknesses.
  • •Performed web application vulnerability assessments based on OWASP Top 10 and developed a web vulnerability scanner.
    • Offensive Security Intern, ITSOLERA Pvt. Ltd.
    Jul 2026 – Aug 2026 | Remote
  • •Worked in a team-based environment on assigned offensive security and vulnerability assessment tasks.
  • •Collaborated on the development of multiple cybersecurity tools and presented project outcomes.
    • Offensive Security Intern (Fellowship Program), Black Byt3
    Feb 2026 – May 2026 | Remote
  • •Conducted web application security testing using Burp Suite and OWASP ZAP.
  • •Performed reconnaissance and attack-surface mapping through subdomain enumeration and OSINT.
  • •Documented vulnerabilities with CVSS severity, proof of concept, methodology, and remediation guidance.
    • Projects
    Subdomain Enumeration Tool, Python, Shodan API, VirusTotal API, HTTP requests
    2026
  • •Developed a reconnaissance tool for attack surface mapping using brute-force and API-based subdomain discovery
  • •Implemented live host validation and HTTP filtering to identify active subdomains
  • •Integrated Shodan and VirusTotal APIs for OSINT-based asset enrichment and exposure analysis
  • •Designed for external attack surface discovery to support reconnaissance phase of penetration testing engagements
    • Education
    Bachelor of Science in Cyber Security, FAST National University of Computer and Emerging Sciences, Karachi
    2023 – Present
  • •Current CGPA (3.19/4.0) | Dean's List Honoree (Fall 2024, 3.83 SGPA)
  • •Expected Graduation: May 2027
    • Cybersecurity Training & Ethical Hacking Experience
  • •TryHackMe: Pre-Security, Cybersecurity 101, Web Fundamentals, Junior Penetration Tester paths — enumeration, exploitation, and privilege escalation labs.
  • •PortSwigger Web Security Academy: exploitation of SQLi, XSS, and access control vulnerabilities.
  • •VulnHub: Basic Pentesting, Mr Robot — structured recon → enumeration → exploitation attack cycles.
  • •Microsoft Threat Modeling Tool: DFD creation and STRIDE-based threat analysis (academic coursework).
    • CTF Achievements
  • •3rd of 56 teams — Intra-FAST CTF, FAST-NUCES Karachi (Nov 2025)
  • •8th of 50 teams — PROCOM '26 CTF, FAST-NUCES Karachi (Feb 2026)
  • •8th of 60 teams — CyberSENTS CTF 2.0, NED University of Engineering and Technology (Oct 2025)
  • •Top 10 — multiple university-level CTFs, FAST-NUCES Karachi (2023–2024)